Microsoft · Security update · October 13, 2026
KB5127660: October 2026 security update
KB5127660, released October 13, 2026, fixes 17 CVEs in Microsoft .NET Framework 3.5 on Windows Server 2012. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
17
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0144
73rd percentile
Priority of the 17 CVEs
Patch now 0
Urgent 1
High 16
Routine 0
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-96222 | Active Directory Federation Services (AD FS) | Spoofing | 9.4 | 0.0059 | Exploitation Less Likely |
| High | CVE-2026-70035 | .NET Framework | Remote Code Execution | 8.8 | 0.0144 | Exploitation Less Likely |
| High | CVE-2026-83520 | .NET | Remote Code Execution | 8.8 | 0.0144 | Exploitation Less Likely |
| High | CVE-2026-58280 | .NET | Denial of Service | 9.4 | 0.0125 | Exploitation Less Likely |
| High | CVE-2026-69651 | .NET | Denial of Service | 9.4 | 0.0125 | Exploitation Less Likely |
| High | CVE-2026-96958 | .NET | Denial of Service | 7.5 | 0.0120 | Exploitation Less Likely |
| High | CVE-2026-96960 | .NET | Denial of Service | 7.5 | 0.0120 | Exploitation Less Likely |
| High | CVE-2026-96233 | ASP.NET Core | Denial of Service | 9.4 | 0.0099 | Exploitation Unlikely |
| High | CVE-2026-84008 | .NET | Denial of Service | 7.5 | 0.0099 | Exploitation Less Likely |
| High | CVE-2026-96959 | .NET | Denial of Service | 7.5 | 0.0097 | Exploitation Less Likely |
| High | CVE-2026-70174 | .NET | Remote Code Execution | 8.8 | 0.0091 | Exploitation Less Likely |
| High | CVE-2026-97788 | Active Directory Federation Services (AD FS) | Information Disclosure | 7.5 | 0.0088 | Exploitation Less Likely |
| High | CVE-2026-85363 | .NET Framework | Elevation of Privilege | 8.8 | 0.0086 | Exploitation Less Likely |
| High | CVE-2026-70007 | .NET Framework | Remote Code Execution | 8.8 | 0.0080 | Exploitation Less Likely |
| High | CVE-2026-96224 | .NET | Remote Code Execution | 8.8 | 0.0076 | Exploitation Less Likely |
| High | CVE-2026-97801 | .NET Framework | Tampering | 7.5 | 0.0073 | Exploitation Less Likely |
| High | CVE-2026-62886 | .NET | Elevation of Privilege | 7.8 | 0.0047 | Exploitation Less Likely |
Showing 1 to 17 of 17
1